3468 matches found
CVE-2012-5863
The CVE-2012-5863 vulnerability affects Sinapsi eSolar systems (Light, DUO, and related Sinapsi devices) with firmware prior to 2.0.2870_xx_2.2.12. It is an OS Command Injection flaw in the ping.php endpoint, where shell metacharacters in the ip dominio parameter can be used by an unauthenticated...
CVE-2012-5864
The CVE-2012-5864 issue affects Sinapsi eSolar family web-based management interfaces (Light, eSolar, and DUO) prior to firmware 2.0.2870_2.2.12. The root cause is improper authentication: management pages do not require login, enabling remote attackers to obtain administrative access via direct ...
CVE-2012-5862
CVE-2012-5862 concerns Sinapsi/Sinapsi eSolar devices where hard-coded credentials are stored in the login.php PHP script. Multiple connected sources confirm that an attacker can log in with administrative privileges, enabling unauthorized access. The ICS-CERT advisory for Sinapsi (and related PR...
CVE-2012-5861 Sinapsi eSolar SQL Injection
These Sinapsi devices do not check the validity of the data before executing queries. By accessing the SQL table of certain pages that do not require authentication within the device, attackers can leak information from the device. This could allow the attacker to compromise confidentiality...
CVE-2012-5862 Sinapsi eSolar Hard-Coded Password
These Sinapsi devices store hard-coded passwords in the PHP file of the device. By using the hard-coded passwords in the device, attackers can log into the device with administrative privileges. This could allow the attacker to have unauthorized access...
IOServer XML Server URI Directory Traversal Arbitrary File Access
Binary data scadaioserverxmlserverdirectorytraversal.nbin...
SCADA DNP3 unauthorized client
...
SCADA DNP3 cold restart function code
...
SCADA DNP3 server unsolicited auth challenge response function code
...
SCADA DNP3 assign class function code
...
SCADA DNP3 abort file function code
...
SCADA DNP3 freeze time no ack function code
...
SCADA DNP3 read function code
...
SCADA DNP3 server auth challenge response function code
...
SCADA DNP3 dir operate function code
...
SCADA DNP3 get file info function code
...
SCADA DNP3 warm restart function code
...
SCADA DNP3 auth file function code
...